$ rpki-client -vvf repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft File: 8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft (raw, json) Hash identifier: mtYJ/1yjV/eDNaEYodgMBcSHbxc6Fq5aBCgYReDgIrE= Subject key identifier: B7:24:5D:F8:0B:0F:81:57:F9:E4:08:BF:85:EE:01:5A:47:5D:FA:09 Authority key identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF Certificate issuer: /CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF Certificate serial: 491F4A398CA2EAC8DAD4A11DE2F6992486196CD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft Manifest number: B4 Signing time: Sat 19 Jul 2025 06:21:06 +0000 Manifest this update: Sat 19 Jul 2025 06:16:06 +0000 Manifest next update: Tue 22 Jul 2025 15:30:06 +0000 Files and hashes: 1: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: X/C9vXKY/TY9dLHbewA4tddP0TItlp1o/B62rHS1ZLs=) 2: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: nNqPduu/JjsIMhgAQMQxpm1Co5pg16TuoWu2Q/HzWgA=) 3: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: 4N3xCB2x4rBoMiXQaq1TIxjQcspdHHBn4voGBhoXwMQ=) 4: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: aR62APrh1DccZKre5l7C6SLFps3TBPFdm3R3znGJ1fA=) 5: 8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl (hash: j1Kavwvrc8TcH08bNfIFWJ4dAFr6x29awJ3sZLFqxw0=) 6: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: A2G6b+fxTo20QvHK7lUw9boisWwmFFcOlzGIN95UCMI=) 7: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: AZoy99OzaaD9x6sZSBHTE/6tOjO7s0t/ExrzVTGMWVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1f:4a:39:8c:a2:ea:c8:da:d4:a1:1d:e2:f6:99:24:86:19:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF Validity Not Before: Jul 19 06:16:06 2025 GMT Not After : Jul 22 15:30:06 2025 GMT Subject: CN=B7245DF80B0F8157F9E408BF85EE015A475DFA09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:e5:10:64:87:8d:9c:f9:c1:4e:a1:15:b3: b2:0e:3b:83:57:21:db:fa:ba:b0:9d:39:56:05:18: 6c:27:56:b9:1f:b3:18:1f:8d:4b:b5:78:e7:47:a9: b6:5c:2f:66:0d:54:0a:60:49:3b:27:ee:0f:90:89: 3d:b8:63:a3:ee:36:97:da:16:3c:12:7f:4b:71:14: 26:be:09:ab:d2:40:c0:88:e0:3c:23:81:dd:9a:d0: a4:a1:9e:3f:f2:c7:38:04:ba:38:53:4a:ed:e2:44: 04:cf:87:86:f5:6f:11:cc:b1:68:3a:0f:16:e7:61: ed:c5:db:92:e1:52:d9:a2:45:bd:2c:a6:fc:a5:17: 45:0d:36:a8:7a:b9:37:ff:81:e6:16:53:63:5d:a2: 6c:c7:af:fe:cb:5f:43:2b:66:1e:a8:01:52:ef:84: 09:25:aa:de:26:bf:17:eb:32:90:39:31:03:14:d2: 90:2d:50:41:19:aa:1a:2a:9d:bc:a3:0a:41:dd:43: 0a:1a:59:cc:27:e3:b8:0f:bc:7d:41:b8:6f:ea:e6: 7d:e2:55:67:00:f5:70:cf:ee:d7:d9:82:f3:82:07: 2d:bb:26:2a:4f:df:81:85:96:a0:72:21:06:f7:e3: e4:1d:ea:36:c7:53:55:d1:c9:eb:b9:58:cb:05:ef: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:24:5D:F8:0B:0F:81:57:F9:E4:08:BF:85:EE:01:5A:47:5D:FA:09 X509v3 Authority Key Identifier: keyid:8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b9:7f:1d:48:4a:cf:c8:16:b9:b2:35:0b:e3:9e:f8:02:12: f0:ca:67:7b:cb:78:d3:e3:c8:bd:98:7e:29:43:0e:f1:c9:a9: ac:ce:5a:5d:a1:45:42:c4:e9:54:71:bb:32:29:07:99:98:0d: 1c:b6:3b:f7:d1:f5:a9:04:f8:84:ec:2a:ae:7f:69:a9:a5:ef: 4b:e6:0b:5f:51:d3:2b:fe:71:6c:c5:5e:f7:2d:55:49:ce:ac: 88:a1:15:8a:bd:1f:12:00:f8:3b:1c:39:bd:a3:ce:6c:30:a5: 3b:fb:33:d9:dc:e1:03:38:2f:5e:ac:1d:04:aa:cb:5a:5b:01: 2d:dc:74:5b:34:ae:fe:a0:9d:bc:66:86:50:16:c1:2e:9c:01: 59:b7:25:50:a9:76:b1:96:76:88:84:2d:4d:92:7d:6b:2e:5e: ff:9d:1e:d9:91:cd:41:a3:3a:a4:43:67:1d:92:14:07:fa:fe: 44:58:f0:f9:35:ad:17:34:f5:f2:6f:5e:9e:60:8f:6f:cd:c8: 34:90:25:22:6e:6b:ec:fd:17:24:7c:28:86:b4:b4:95:59:cd: 9e:72:6d:3c:47:57:c3:82:6a:df:f8:a1:68:90:c0:f1:fe:18: 48:3d:e9:47:2a:91:31:44:c8:53:71:17:49:2d:08:cb:46:1e: 14:61:07:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSR9KOYyi6sja1KEd4vaZJIYZbNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0 MzUzRjZGRjAeFw0yNTA3MTkwNjE2MDZaFw0yNTA3MjIxNTMwMDZaMDMxMTAvBgNV BAMTKEI3MjQ1REY4MEIwRjgxNTdGOUU0MDhCRjg1RUUwMTVBNDc1REZBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEOUQZIeNnPnBTqEVs7IOO4NX Idv6urCdOVYFGGwnVrkfsxgfjUu1eOdHqbZcL2YNVApgSTsn7g+QiT24Y6PuNpfa FjwSf0txFCa+CavSQMCI4Dwjgd2a0KShnj/yxzgEujhTSu3iRATPh4b1bxHMsWg6 DxbnYe3F25LhUtmiRb0spvylF0UNNqh6uTf/geYWU2NdomzHr/7LX0MrZh6oAVLv hAklqt4mvxfrMpA5MQMU0pAtUEEZqhoqnbyjCkHdQwoaWcwn47gPvH1BuG/q5n3i VWcA9XDP7tfZgvOCBy27JipP34GFlqByIQb34+Qd6jbHU1XRyeu5WMsF744TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtyRd+AsPgVf55Ai/he4BWkdd+gkwHwYDVR0j BBgwFoAUi6K14H+tVyjH3vv0/BC9BENT9v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Yzc2Yzg1Zi05YTRmLTRhZmMtOTY5Yi04ZGEyNTM2YzVjMjQvMC84QkEyQjVFMDdG QUQ1NzI4QzdERUZCRjRGQzEwQkQwNDQzNTNGNkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0MzUz RjZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM3NmM4NWYtOWE0Zi00YWZjLTk2 OWItOGRhMjUzNmM1YzI0LzAvOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJE MDQ0MzUzRjZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq5fx1ISs/IFrmyNQvjnvgCEvDKZ3vLeNPj yL2YfilDDvHJqazOWl2hRULE6VRxuzIpB5mYDRy2O/fR9akE+ITsKq5/aaml70vm C19R0yv+cWzFXvctVUnOrIihFYq9HxIA+DscOb2jzmwwpTv7M9nc4QM4L16sHQSq y1pbAS3cdFs0rv6gnbxmhlAWwS6cAVm3JVCpdrGWdoiELU2SfWsuXv+dHtmRzUGj OqRDZx2SFAf6/kRY8Pk1rRc09fJvXp5gj2/NyDSQJSJua+z9FyR8KIa0tJVZzZ5y bTxHV8OCat/4oWiQwPH+GEg96UcqkTFEyFNxF0ktCMtGHhRhB5U= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:34 2025 by rpki-client